# Configuring Input Type for Filebeat Module

**URL:** https://discuss.elastic.co/t/configuring-input-type-for-filebeat-module/193819
**Category:** Beats
**Tags:** filebeat
**Created:** [August 5, 2019, 2:42pm UTC](https://discuss.elastic.co/t/configuring-input-type-for-filebeat-module/193819 "2019-08-05T14:42:58Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![learnitall](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/learnitall/32/51531_2.png) [@learnitall](https://discuss.elastic.co/u/learnitall)
#### Post date: [August 5, 2019, 2:42pm UTC](https://discuss.elastic.co/t/configuring-input-type-for-filebeat-module/193819/1 "2019-08-05T14:42:58Z")

</div>

Hello! Is there a way to add configuration options to the lower-level input type that a filebeat module uses? For instance, if I am using the zeek filebeat module and I want to change some of the default settings for the log input, such as `close_renamed`, `close_inactive`, `ignore_older`, etc., is there a way to do this from the module configuration? I haven't found a way yet through the online documentation and it doesn't seem possible from looking through the source code.

Thanks!

---

<div class="post-metadata">

### Author: ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)
#### Post date: [August 6, 2019, 12:16pm UTC](https://discuss.elastic.co/t/configuring-input-type-for-filebeat-module/193819/2 "2019-08-06T12:16:07Z")

</div>

It is possible by providing input level config under `input` keyword.

Example using the system module:

```auto
 #========================== Modules configuration =============================
 filebeat.modules:
 - module: system
   # Syslog
   syslog:
     enabled: true

     # Input configuration (advanced). Any input configuration option
     # can be added under this section.
     input:
       close_renamed: true

```

---

<div class="post-metadata">

### Author: ![learnitall](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/learnitall/32/51531_2.png) [@learnitall](https://discuss.elastic.co/u/learnitall)
#### Post date: [August 6, 2019, 4:14pm UTC](https://discuss.elastic.co/t/configuring-input-type-for-filebeat-module/193819/3 "2019-08-06T16:14:50Z")

</div>

Fantastic! I'll give that a shot, thank you.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 3, 2019, 4:14pm UTC](https://discuss.elastic.co/t/configuring-input-type-for-filebeat-module/193819/4 "2019-09-03T16:14:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.